This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json) Hash identifier: DEjdUYnhWcL0hTdlMxwLF7dpsXew/0y/cJqy1TTo0ao= Subject key identifier: DE:B9:61:AD:83:3D:ED:C6:83:7F:91:FB:25:CE:EE:A4:8E:82:EF:7F Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68 Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68 Certificate serial: 019B1C85CCF8DFC9887220362C82ADE41B42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft Manifest number: 0644 Signing time: Sun 14 Dec 2025 11:01:29 +0000 Manifest this update: Sun 14 Dec 2025 11:01:29 +0000 Manifest next update: Mon 15 Dec 2025 11:01:29 +0000 Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=) 2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=) 3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: 2dbfsyEnX6RyPbMc/aEYf2QOkwhR2i9cVgYidVs6g28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:cc:f8:df:c9:88:72:20:36:2c:82:ad:e4:1b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68 Validity Not Before: Dec 14 11:01:29 2025 GMT Not After : Dec 15 11:01:29 2025 GMT Subject: CN=deb961ad833dedc6837f91fb25ceeea48e82ef7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:8e:5d:7f:f4:8b:1c:d3:eb:59:42:c7:93: 64:65:ed:6f:9f:59:58:77:a8:fa:31:c1:dc:fb:b0: b5:9a:de:c3:d9:e7:b8:e8:ce:06:fa:94:d0:44:32: de:e6:5e:75:a8:3d:ce:18:15:ec:98:56:36:f8:c9: 87:98:01:19:6d:e8:81:63:06:db:7d:91:3a:16:6f: 6c:e2:f1:b4:48:27:0c:20:83:8c:14:3b:0a:ee:37: 10:4f:3f:cc:b4:48:85:25:41:f4:3b:34:f6:3b:98: 45:48:8f:7d:04:f0:34:ad:8d:40:da:ab:54:55:0d: 7f:90:d8:33:6d:3f:37:7d:90:70:72:76:34:b3:43: 14:e7:9d:38:80:bf:9a:df:f1:6c:6b:68:b1:33:8e: 22:58:db:f7:4b:e2:1c:8c:6e:f1:91:9c:3d:bc:0a: eb:97:c3:63:9b:aa:51:1f:7f:ec:17:4c:8d:43:ae: e4:40:f7:ef:7a:27:3f:37:59:f8:1d:d2:35:7c:d4: 59:25:2c:7b:da:08:4b:0b:25:01:cc:ca:13:cb:6c: 6d:1d:4b:da:3d:f1:7b:17:60:9b:5a:08:03:3d:65: 39:ca:13:4c:57:1d:2a:c5:7b:d8:12:c8:78:b8:96: f9:d2:56:7a:fd:2f:1b:25:b6:78:5b:cb:99:6a:88: 60:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B9:61:AD:83:3D:ED:C6:83:7F:91:FB:25:CE:EE:A4:8E:82:EF:7F X509v3 Authority Key Identifier: keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:98:49:15:82:33:f7:bc:5d:ea:8e:fa:e5:ed:f0:8f:ff:53: 6c:1a:91:9e:8b:a5:e1:30:90:83:0f:74:0d:bd:b7:86:97:0d: 92:fc:80:1d:85:82:f7:ae:7c:8f:eb:71:8c:80:48:91:7f:89: b1:09:02:ff:03:98:3b:51:77:9b:62:6e:0b:cc:26:75:66:d0: 3b:92:02:19:6e:f3:b2:d6:75:f4:9f:dd:8b:1a:da:73:0e:56: 29:b3:fc:29:29:b2:7a:7d:07:b8:5b:a2:52:cb:ff:ec:db:a7: 88:fe:c0:d1:e9:23:3c:b6:e6:6e:61:0f:6e:a1:9d:79:77:02: 0b:fc:7f:8c:16:e3:93:a4:57:1f:5b:b1:9c:32:be:ef:14:7a: fa:b2:f2:ff:65:85:55:81:ef:01:86:67:db:95:12:48:ec:5d: e0:bb:98:ce:af:d1:27:01:09:2e:48:82:66:3e:e7:64:b9:86: d2:5d:12:ff:38:ba:40:39:1c:af:ed:e2:ba:a9:29:89:5d:fd: 49:8c:9c:61:e9:62:2c:3a:21:0d:04:bd:d0:86:1e:e4:ca:83: a5:0b:2e:70:ef:76:49:98:67:43:c0:ae:c6:cf:2a:93:08:d8: c1:a0:f3:37:ec:85:06:93:d4:46:be:c2:c4:c4:bc:ed:88:5f: 24:cb:11:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschcz438mIciA2LIKt5BtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNWMwODMyM2FjMjdhYjY1NTNhNWE2OWE3M2E1OGY4MDI0 MjNkNjgwHhcNMjUxMjE0MTEwMTI5WhcNMjUxMjE1MTEwMTI5WjAzMTEwLwYDVQQD EyhkZWI5NjFhZDgzM2RlZGM2ODM3ZjkxZmIyNWNlZWVhNDhlODJlZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiCOXX/0ixzT61lCx5NkZe1vn1lY d6j6McHc+7C1mt7D2ee46M4G+pTQRDLe5l51qD3OGBXsmFY2+MmHmAEZbeiBYwbb fZE6Fm9s4vG0SCcMIIOMFDsK7jcQTz/MtEiFJUH0OzT2O5hFSI99BPA0rY1A2qtU VQ1/kNgzbT83fZBwcnY0s0MU5504gL+a3/Fsa2ixM44iWNv3S+IcjG7xkZw9vArr l8Njm6pRH3/sF0yNQ67kQPfveic/N1n4HdI1fNRZJSx72ghLCyUBzMoTy2xtHUva PfF7F2CbWggDPWU5yhNMVx0qxXvYEsh4uJb50lZ6/S8bJbZ4W8uZaohgZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN65Ya2DPe3Gg3+R+yXO7qSOgu9/MB8GA1UdIwQY MBaAFL1cCDI6wnq2VTpaaac6WPgCQj1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMt NDY0MWFiNmU0YmZiLzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMtNDY0MWFiNmU0YmZi LzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMphJFYIz 97xd6o765e3wj/9TbBqRnoul4TCQgw90Db23hpcNkvyAHYWC9658j+txjIBIkX+J sQkC/wOYO1F3m2JuC8wmdWbQO5ICGW7zstZ19J/dixracw5WKbP8KSmyen0HuFui Usv/7NuniP7A0ekjPLbmbmEPbqGdeXcCC/x/jBbjk6RXH1uxnDK+7xR6+rLy/2WF VYHvAYZn25USSOxd4LuYzq/RJwEJLkiCZj7nZLmG0l0S/zi6QDkcr+3iuqkpiV39 SYycYeliLDohDQS90IYe5MqDpQsucO92SZhnQ8Cuxs8qkwjYwaDzN+yFBpPURr7C xMS87YhfJMsRfA== -----END CERTIFICATE-----Generated at Sun Dec 14 21:13:12 2025 by rpki-client